Claude Code skills for finding bugs and vulnerabilities — bug bounty, pentest, CTF, code review.
This repository also configures its own agents. See what hacking-skills tells them →
securityfortech/hacking-skills
Plugin Claude Code
Bundles 28 skills · 2,564 tokens together
Web application security skills covering recon, authentication, authorization, session management, injection, client-side attacks, and business logic. Distilled from OWASP WSTG, security research, and bug bounty writeups.
securityfortech/hacking-skills
Plugin Claude Code
Bundles 7 skills · 887 tokens together
Mobile application security skills covering Android and iOS: insecure storage, weak cryptography, authentication bypass, network security, platform interaction, code quality, and resilience against reverse engineering.
securityfortech/hacking-skills
Plugin Claude Code
Bundles 5 skills · 603 tokens together
CI/CD pipeline security skills covering GitHub Actions script injection, cache poisoning, pwn-request, bot command injection, and self-hosted runner poisoning.
securityfortech/hacking-skills
Plugin Claude Code
Bundles 3 skills · 334 tokens together
Paste any source → SKILL.md (/distill-skill); log run outcomes (/observe-skill); inspect failure history and propose amendments (/amend-skill).
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: